What is wks.exe? - Process / file: wks.exe

File: wks.exe Process/task name: Windows32KernelStart

The wks.exe task and file is usually started together with Windows under the name of Windows32KernelStart and the wks.exe command or file.

Detected by the Symantec security program as Downloader.Lapurd and also by Malwarebytes Anti-Malware as the Trojan-type malicious program named Trojan.Downloader

More information: http://www.symantec.com/security_response/writeup.jsp?docid=2009-061100-3838-99

Tip: The wks.exe process/program should NOT be started with the system It may be a threat to system security.

Do you want to know if wks.exe is a virus or malicious program? See: wks.exe is a virus?

Errors or problems with the wks.exe file? Write us and we will respond as soon as possible.IMPORTANT: remember to say the version of your operating system, time and/or place where the error appears, and any other information that you think is relevant to help find the solution.

Comments

What is csrss.exe? - Process / file: csrss.exe

File: csrss.exe Name of the process/task: Client Server Runtime Process csrss.exe is the Client Server Runtime SubSystem, process of some system versions Windows operating. When an application makes a call to the Win32 API, it uses csrss.exe, which communicates it with the operating system kernel to run the API. In general , it is a normal process in some versions of Windows, however, many malicious programs can use the same name (or a similar name) to camouflage and go unnoticed. In fact, there are the Trojan CSRSS.EXE (csrss.exe in capital letters) and the W32.Netsky.AB worm, which use the same name to try to go unnoticed. We have records of other processes that use the same file name: • File: csrss.exe-Name: AtiSound The task and file csrss.exe is the WinSpy computer surveillance software.Uninstall this program unless you have installed it yourself. Clarification: it is not the legitimate Windows file csrss.exe that is always located in% System%.Instead it is locate...

What is tptray.exe? - Process / file: tptray.exe

File: Tptray.exe Process/task name: Toshiba Laptops Traybar Process/TPNF The process and file Tptray.exe loads an icon in the toolbar Windows tasks and allows you to configure the touchpad of Toshiba notebooks. Under normal conditions, this process occupies about 2 MB of RAM. This file is usually located in: C: \ Program Files \ TOSHIBA \ TouchPad \ TPTray.exeC: \ Program Files \ TOSHIBA \ TouchPadNF \ TPTray.exe This application is loaded when Windows starts under the name of TPNF. You can disable this process, using the msconfig tool (Start-Run-write: msconfig), Start tab and uncheck the item name: TPNF. Do you want to know if Tptray.exe is a virus or malicious program? See: Is Tptray.exe virus? Errors or problems with the Tptray.exe file? Write us and we will respond as soon as possible.IMPORTANT: remember to say the version of your operating system, time and/or place where the error appears, and any other information that you think is relevant to help find the so...

What is winlogons.exe? - Process / file: winlogons.exe

File: winlogons.exe Process/task name: winlogons.exe The task and file winlogons.exe is the KGB Key Logger or KGB Keylogger program ( now replaced by Refog Keylogger) developed by Refog Inc.Monitor the PC.You must remove it unless it has been installed by you. The file is located in% ProgramFiles% \ [product name] More information: http://www.refog.com/keylogger.html It usually starts with Windows under the name of winlogons.exe and the command or file winlogons.exe. Tip: The user decides whether or not to let the winlogons.exe task start with the system if necessary. Do you want to know if winlogons.exe is a virus or program? malignant? See: is winlogons.exe virus? Errors or problems with the winlogons.exe file? Write us and we will respond as soon as possible.IMPORTANT: remember to say the version of your operating system, time and/or place where the error appears, and any other information that you think is relevant to help find the solution.

What is sprtcmd.exe / P O2?

File: sprtcmd.exe/P O2 Process/task name: O2 The task and file sprtcmd.exe/P O2 is a technical support tool for O2 broadband users. More information: http://www.o2.co.uk/ It usually starts with Windows under the name of O2 and the command or file sprtcmd.exe/P O2. Tip: The user decides whether or not to leave the O2 task together with the system if necessary. Want to know if sprtcmd.exe/P O2 is a virus or malicious program? See: sprtcmd.exe/P O2 is a virus? Errors or problems with the sprtcmd.exe/P O2 file ? Write us and we will respond as soon as possible.IMPORTANT: remember to say the version of your operating system, time and/or place where the error appears, and any other information that you think is relevant to help find the solution.

What is micoffice.exe? - Process / file: micoffice.exe

File: micoffice.exe Name of the process/task: Msoffice The task and file micoffice.exe usually starts together with Windows under the name of Msoffice and the command or file micoffice.exe. Detected by the Intel Security/McAfee security program as RDN/Generic.bfr! di and also by Malwarebytes Anti-Malware as the malicious backdoor type program named Backdoor.Agent.DC More information: http://home.mcafee.com/VirusInfo/VirusProfile.aspx?key=3066679 Tip: The process/program micoffice.exe NO It must be started with the system.It can be a threat to system security. Do you want to know if micoffice.exe is a virus or malicious program? See: micoffice.exe is it a virus? Errors or problems with the micoffice.exe file? Write us and we will respond as soon as possible.IMPORTANT: remember to say the version of your operating system, time and/or place where the error appears, and any other information that you think is relevant to help find the solution.

What is ashdisp.exe? - Process / file: ashdisp.exe

File: ashdisp.exe Process/task name: Avast AntiVirus Ashdisp.exe is a process that belongs to the Avast Internet security package.It is essential for the operation of the Avast antivirus from ALWIL Software, and should not be terminated. It is responsible for presenting an icon in the notification area (system tray), where the configuration of Avast! is accessed. This file should be located at: C: Program Files Alwil Software Avast4 ashDisp.exe It is loaded when Windows starts under the name of avast !. We have records of other processes that use the same file name: • File: ashDisp.exe-Name: ashDisp The task and file ashDisp.exe starts an icon in the notification area (where the time and day) of the Windows taskbar.Serve for notifications and open the Avast antivirus in versions 4.*. It usually starts with Windows under the name of ashDisp and the command or ashDisp.exe file. Tip: Usually the ashDisp process/program should be left at system startup. Do you want...

What is NOD32KUY.EXE? - Process / file: nod32kuy.exe

File: NOD32KUY.EXE Name of the process/task: NOD32KUY.EXE The process and file NOD32KUY.EXE could be related to a malicious program. It is recommended to clean the computer using an antivirus and/or antivirus online with the system in Safe Mode. Do you want to know if NOD32KUY.EXE is a virus or malicious program? See: NOD32KUY.EXE is virus? Errors or problems with the NOD32KUY.EXE file? Write us and we will respond as soon as possible.IMPORTANT: remember to say the version of your operating system, time and/or place where the error appears, and any other information that you think is relevant to help find the solution. CLARIFICATION: NOD32KUY.EXE could be a malignant process.Malignant processes or files often use known program names to go unnoticed. To find out if NOD32KUY.EXE is a virus, check these tips: Is NOD32KUY.EXE a malicious program? Processes with similar names: DICTIONARY OF FILES, PROCESSES AND TASKS Search by file name: Dictionary that has the typica...

What is boot.tmp? - Process / file: boot.tmp

File: Boot.tmp Name of the process/task: HKCU The task and file Boot.tmp usually starts together with Windows under the name of HKCU and the command or file Boot.tmp. Detected by the Malwarebytes Anti-Malware security program as the malicious backdoor type program named Backdoor.HMCPol.Gen.The file is located at% Windir% Microsoft Tip: The Boot.tmp process/program should NOT be started with the system.It can be a threat to system security. Do you want to know if Boot.tmp Is it a virus or malicious program? See: Is Boot.tmp virus? Errors or problems with the Boot.tmp file? Write us and we will respond as soon as possible.IMPORTANT: remember to say the version of your operating system, time and/or place where the error appears, and any other information that you think is relevant to help find the solution.

What is userinit.exe, giuolop.exe? - Process / file: userinit.exe, giuolop.exe

File: userinit.exe, giuolop.exe Process/task name: Userinit The task and file userinit.exe, giuolop.exe usually starts together with Windows under the name of Userinit and the command or file userinit.exe, giuolop.exe. Detected by the Malwarebytes Anti-Malware security program as the Trojan-type malicious program named Trojan.Agent.AI. Clarification: this program modifies the Windows registry in the path HKLM \ Software \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon the value of Userinit to place the malicious file "giuolop.exe" (located in the% AppData% \ giuopl folder) being its original value the userinit.exe file, which is located in% System% and if it is legitimate, so it should NOT be deleted. Tip: The process/program userinit.exe, giuolop.exe should NOT be started by the system.It can be a threat to system security. Do you want to know if userinit.exe, giuolop.exe is a virus orMalignant program? See: userinit.exe, giuolop.exe is virus? Errors or ...

What is this file?

Search This Blog